New install of Nesos ? Required?

1

I have recieve the follow from the admins of deSec

"During the last 31 days, you performed a dynDNS update using an outdated HTTPS encryption method (TLSv1.2/DHE).

We are about to disable support for this connection method. Before we do so, we just wanted to let you know about the upcoming change. In case you experience connection issues after the change, we recommend updating your dynDNS client."

Im not sure if this message means I should simply update my client to make sure the IP is updated or if it means Im suppose to install new software.

The current software I am using is DynamicDnsUpdater.exe program called “Nesos - Dynamic Dns Updater” Version 1.2.0.37078 windows 7. (it is more of an appliance )

Please advise.

Am I suppose to install Nesos-ita enforce tls1.2 or 1.3 maybe ?

Update:

I’m kinda confused because it appears version 1.2 is pretty much the latest version. Can someone help me sort out my confusion?

Regards.

2

The message is about the software you use to update your DNS records. It connected to the deSEC servers with TLS version 1.2, which deSEC won’t support much longer. According to a message on the developer’s page, the latest version of the software, which is from six years ago, also supports TLS 1.3, so you should be good without an update. The protocol is negotiated between client and server on connection. If, contrary to the developer’s announcement, the software fails to work with TLS 1.3, the software will need to be updated or you will need to use a different software.

3

No, I think the point of the message was not TLSv1.2 per se, but the DHE ciphers no longer being supported. TLSv1.2 remains supported (when used with the more secure ciphers).
See: Drop DHE TLS ciphers #1189 and feat(www): drop DHE TLS ciphers #1231

1 Like
4

I stand corrected. Maybe it’s just time to retire Windows 7, but there is a chance that with the latest available update to the .net framework, the required cipher suites can be enabled. The developer may roll his eyes at you if you ask him for an update so that you can keep using Windows 7 though.

5

Probably :wink:

I had a similar situation a few years back on an older macOS machine. I eventually used stunnel on a more modern LAN-host (OpenBSD VM) and channeled the requests through that to get more modern TLS.

I have no idea about .NET updates. But that may be worth a try at least. Might be less complicated to set up than stunnel?